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Downloacfing of applications in a digital decoder 



(54) 

(57) A method for downloading an executable appli- 
cation into a decoder 1 tor a digital broadcast system, 
characterised in that the application is stored on a port- 
able memory card introduced into a card reader 6, 7 in 
the decode, the decoder reading and downloading the 
application from the card. Data may preferably be 
stored in the smartcard in a broadcast data format such 



as the MPEG format to permit the processing of such 
data in the same manner as the control unit 40 of the 
decode processes data downloading by a broadcast 
transmission. The invention extends equally to a 
decoder and a memory card for use in such a method. 
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Description 

[0001] The present application relates to a method 
and apparatus for downloading executable applications 
into a decoder used in a digital broadcast system, for 5 
example, as used in a digital television system. 
[0002] Broadcast transmission of digital data is well- 
known in the field of pay TV systems, where scrambled 
audiovisual information is sent usually by a satellite or 
satellite/cable link, to a number of subscribers, each io 
possessing a decoder or receiver/decoder capable of 
descrambling the transmitted program for subsequent 
viewing. Terrestrial digital broadcast systems are also 
known. Recent systems have also used the broadcast 
link to transmit other data, in addition to or as well as 75 
audiovisual data, such as computer programs or inter- 
active applications to the decoder or a to a connected 
PC. 

[0003] The same decoder unit may be supplied by the 
system designer to a number of different service provid- zo 
ers or broadcast companies in a number of different 
countries. In such circumstances, some degree of test- 
ing or customisation of the decoder unit by the service 
provider will usually be necessary. Typically, a testing 
application which operates independently of the nor- 25 
mally installed application is used to check the correct 
operation of the hardware elements of the decoder, eg 
to confirm that the tuner within the decoder operates 
correctly etc. 

[0004] This operation will typically be carried out by 30 
the service provider or distributor before the decoder is 
passed to the consumer, for example, using a dedicated 
PC and a paraDer or series fink to the decoder. An appli- 
cation supplied by the system designer and running on 
the PC is used to adjust the operating parameters of the 35 
decoder. 

[0005] Depending the complexity of the operation and 
the skills of the operator employed to carry out this task 
the time necessary to test the decoder can be consider- 
able and can increase the real cost of the finished item 40 
by a significant amount. 

[0006] Although in its broadest aspect the present 
invention is not limited solely to this context, it is an 
object of the present invention to reduce the time and 
complexity of this type of operation and to provide a sim- 45 
pie means for introducing applications in the decoder. 
[0007] According to the present invention, there is pro- 
vided a method for downloading an executable applica- 
tion into a decoder, characterised in that the application 
is stored on a portable memory card introduced into a so 
card reader in the decoder, the decoder reading and 
downloading the application from the card. 
[0008] Use of a portable memory card enables a pre- 
determined application to be easily and simply intro- 
duced into the decoder without the necessity, for ss 
example, to connect the decoder to a PC, load a testing 
program into the PC etc. The time necessary to carry 
out the testing operation will be greatly reduced since 



an operator can load the application into the decoder by 
a simple insertion of the card into the decoder. 
[0009] Whilst portable memory cards are known in the 
field of decoder technology, their use to date has either 
been restricted to the simple transfer of static data, for 
example, financial data from a credit card inserted in the 
decoder, or to hold decryption keys associated with 
broadcast transmissions. Up until now, such cards have 
not been used to download executable applications. 
This is in part due to the perceived slowness of the data 
link associated with the use of a card slot which has 
acted to discourage system designers from this solu- 
tion. 

[0010] As will be understood, the present invention is 
not limited to the downloading of a testing type applica- 
tion. The card may equally be used to introduce an 
application used to initially configure the decoder. Alter- 
native uses are also imaginable, for example, in which 
cards bearing.a promotional application such as a video 
game or the like, are distributed directly to the end user 
of the decoder. Increasingly, decoder units are incorpo- 
rating more and more functionalities associated with 
general multimedia products and using a portable mem- 
ory card provides a relatively simple means for a non- 
technical consumer to introduce executable applica- 
tions into the decoder. 

[001 1 ] The term "portable memory card" includes any 
portable cards that may be inserted within a corre- 
sponding card slot in the decoder. The card may include 
a microprocessor chip in addition to a simple memory 
element The card may be powered via a connection to 
a power source located internally within the reader slot 
of the decoder or may include a battery power source. 
[0012] In one embodiment, the card may conform to 
the standards necessary to permit reading in a PCMCIA 
reader in the decoder. Preferably, however, the card is 
adapted to be read in a smartcard reader in the 
decoder. This solution possesses a number of advan- 
tages in comparison, for example, with a PCMCIA card, 
notably due to the simplicity of the contacts formed on 
the card which reduces the cost of production and the 
ubiquity of smartcard readers in decoder units. 
[0013] The characteristics of smartcards and smart- 
card readers are well known and are defined, for exam- 
ple, in the international standards ISO 7816JI (physical 
characteristics), ISO 781 6_2 (contact dimensions and 
placement) and ISO 781 6_3 (electrical signals and 
transmission protocols). 

[0014] Unlike, for example, bank cards, the smart- 
cards associated with decoder units need not be fully 
inserted into the unit and may protrude some distance 
from the decoder. Consequently, whilst the card width 
and thickness may correspond to the normalised val- 
ues, the card may be longer than a standard credit card. 
This leads to the possibility to introduce more and larger 
components onto the card. 

[0015] Advantageously, the executable application 
stored within the card and downloaded into the decoder 
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is formatted according to a broadcast data format, such 
as an MPEG data format. MPEG is a well-known stand- 
ard developed for the field of digital broadcasting in 
which data is arranged into a series of tables, each table 
including a packet ID etc. In the context jof the present 
patent application, the term includes all variants, modifi- 
cations or developments of the basic MPEG format 
such as MPEG-2 and, notably the MPEG-2 short for- 
mat. 

[0016] In practice, although the application is organ- 
ised according to the MPEG format, the data can be 
subdivided into a number of modules in the memory of 
the card, the modules being downloaded and put 
together sequentially by the decoder to assemble the 
complete MPEG application. 

[0017] The advantages associated with the use of 
MPEG data are considerable, since the decoder can 
handle and process such applications in the same man- 
ner as it handles applications downloaded via the 
broadcast link. In the case, for example, where the 
decoder includes a virtual machine to process data, the 
application will be interpreted and processed by the 
same logical units within the machine as used for broad- 
cast MPEG applications. 

[0018] As will be understood, where the decoder is 
adapted to download digital broadcast transmissions 
according to an alternative data format, the same 
advantages may be obtained by organising the data in 
the card in this format. 

[0019] According to a further"pre fenred embodiment 
some or part of the application stored within the mem- 
ory card is encrypted with one or more encryption keys. 
In particular, some or part of the data stored in the 
memory card may be signed with a private key, the 
decoder having access to the equivalent public key so 
as to authenticate the origin of the application. In the 
event of non-authentication of the code, the decoder 
may refuse to download the code. Other arrangements, 
using two secret keys of a symmetric algorithm, for 
example, are possible in addition to or instead of this 
signing process. 

[0020] The advantage of a memory card lies in the 
simplicity in which an application may be introduced into 
the decoder. By the same token, the use of a memory 
card could potentially give rise to a problem of security 
by perrrttting the installation of pirate applications into a 
decoder. The use of signed code ensures the integrity 
of applications within the decoder and prevents, for 
example, the introduction of a "trojan horse" program or 
the like into the system. 

[0021 ] Preferably, the decoder is provided with a plu- 
rality of smart card readers, to permit the reading of a 
smartcard carrying the executable application together 
with another smartcard, tor example, a smartcard carry- 
ing a decryption key. 

[002*2] As mentioned above, a principal use of smart 
cards in the context of a decoder relates to the storage 
of decryption and encryption keys associated with that 



decoder. In the case where the executable code down- 
loaded from the memory card is partially or wholly 
encrypted, decryption will most probably be carried out 
in relation to a public key stored on a subscription type 
5 smart card. A miitislot decoder permits interaction 
between the two cards. * 
[0023] Other embodiments for a single-slot decoder 
are possible, for example, in which the application is 
downloaded from the first smartcard and stored in a 
w buffer before the first card is removed and the second , 
card inserted to verify the application, or in which an 
adapter is used to enable both cards to be inserted in 
parallel etc. 

[0024] In one embodiment, the method may include 
15 the steps of downloading the application into the 
decoder, setting one or more parameters associated 
with the application and storing the parameters in the 
memory card for later use. 

[0025] For example, in the case where the memory 
20 card is used as a vehicle tor a testing application devel- 
oped by the system designer, the application may 
include certain parameters, such as tuning frequency, 
which are to be set by the test operator; 
[0026] The f irst time that the application is loaded into 
25 a decoder, the operator will have the option of selecting 
these parameters by, for example, using the remote 
controller of the decoder. Once fixed, the parameters 
can be stored on the card. Thereafter, testing of subse- 
quent decoders will be carried out automatically in rela- 
30 ton to these stored parameters. 

[0027] Forreasonsofsecurity. it is preferable that the 
application remain unchanged and only the newiy set 
parameters reloaded back onto the card. The applica- 
tion may be, for example, stored in an access-restricted 
35 FLASH or ROM memory and the parameters loaded 
into an EEPROM memory unit on the memory card. 
[0028] Advantageously, the memory card includes a 
physical switch means for selecting one of a plurality of 
applications stored on the card that will be downloaded 
40 upon insertion of the memory card in the decoder. For 
example, where the card is used as a vehicle tor a 
nurriber of configuration applications for a number of 
service providers, the card can include a DIL switch 
means which can be set by an operator to select the 
45 configuration application associated with that service 
provider. 

[0029] The present invention extends to a decoder for 
use in a method as described above, in particular, a 
decoder adapted to read broadcast (eg MEPG) format 
data introduced via a card reader in the decoder. The 
present invention also extends to a memory card for use 
in such a method, in particular, including an application 
stored in a broadcast format in the card. 
[0030] Whilst the description refers to < ( receiver/ 
decoders )> and (< decoders )> it will be understood 
that the present invention applies equally to embodi- 
ments* having a receiver integrated with the decoder as 
to a decoder unit functioning in combination with a phys- 
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ically separate receiver. Such a decoder may be of the 
kind used in any satellite, terrestrial, cable etc digital 
broadcast system and may include other multimedia 
type capabilities. 

[0031] Similarly, the term << executable application)) s 
cavers applications written in any form of code (interpre- 
tative code, compiled code etc) and capable of being 
executed. 

[0032] There will now be described, by way of exam- 
ple only, a preferred embodiment of the present inven- w 
tion, with reference to the attached figures, in which: 

Figure 1 shows an overview of the elements of a 
receiver/decoder; 

75 

Figure 2 shows a memory card, adapted to be read 
in a card reader slot in the decoder of Figure 1 ; and 

Figure 3 shows a circuit diagram of the components 
of the card of Figure 2. so 

[0033] Referring to Figure 1, the elements of a 
receiver/decoder 1 or set-top box for use in a digital 
broadcast system and adapted to be used in the 
present invention will now be described. As will be 25 
understood, the elements of this decoder are largely 
conventional and their implementation will be within the 
capabilities of one skilled in the art. 
[0034] As shown; the decoder 1 is equipped with sev- 
eral interfaces for receiving and transmitting data, in 30 
particular an MPEG tuner and demultiplexer 2 for 
receiving broadcast MPEG transmissions, a serial inter- 
face 3, a parallel-interface 4. and a modem back chan- 
nel 5 for sending and receiving data via the telephone 
network. In this embodiment the decoder also includes 35 
a first and second smart card reader 6 and 7, the first 
reader 6 for accepting a subscription smart card con- 
taining decryption keys associated with the system and 
the second, reader 7 for accepting bank cards and, in 
this case, a smartcard containing an application to be 40 
downloaded. 

[0035] The decoder also includes a receiver 8 for 
receiving infra-red control signals from a handset 
remote control 9 and a Peritel output 10 for sending 
audiovisual signals to a television 1 1 connected to the 45 
decoder. 

[0036] Processing of digital signals received via the 
interfaces and generation of digital output signals is 
handled by a central control unit 40. The software archi- 
tecture of the control unit within the decoder may oorre- so 
spond to that used in a known decoder and will not be 
described here in any detail. It may be based, for exam- 
ple, on a virtual machine interacting via an interface 
layer with a lower level operating system implemented 
in the hardware components of the decoder. In terms of ss 
the hardware architecture, the decoder will be equipped 
with a processor, memory elements such as ROM, 
RAM, FLASH memory etc. as in known decoders. 



[0037] An application introduced into the decoder cor- 
responds to a section of code introduced into the 
machine that permits the control, for example, of higher 
level functions of the machine. These may include the 
generation of a graphic sequence on the screen of the 
television display in response to a command from the 
remote control, or the emission of a message via the 
modem 5 to the server associated with the digital broad- 
cast system. 

[0038] Applications may be resident applications 
stored in the ROM or FLASH of the decoder or applica- 
tions broadcast and downloaded via the MPEG inter- 
face 2 of the decoder. Applications can include program 
guide applications, games, interactive services, tele- 
shopping applications, as well as initiating applications 
to enable the decoder to be immediately operational 
upon start-up and applications lor configuring the 
decoder. Applications are stored in memory locations in 
the decoder and represented as resource files compris- 
ing graphic object description files, unit files, variables" 
block files, instruction sequence files, application files, 
data files etc. 

[0039] Conventionally, applications downloaded into 
the decoder via the broadcast link are divided into mod- 
ules, each module corresponding to one or more MPEG 
tables. Each MPEG table may be divided into a number 
of sections. For data transfer via the serial and parallel 
ports, modules are also split into tables and sections, 
the size of the section depending on the channel used. 
As will be described in relation to Figure 4, a similar sec- 
tioning is applied to MPEG tables downloaded using the 
smartcard of the present invention. 
[0040] In the case of broadcast transmission, modules 
are transported in the form of data packets within 
respective types of data stream, for example, the video 
data stream, the audio data stream, a text data stream. 
In accordance with MPEG standards each packet is 
preceded by a Packet Identifier (PID) of 13 bits, one PID 
for every packet transported in the MPEG stream. A 
programme map table (PMT) contains a list of the differ- 
ent streams and defines the content of each stream 
according to the respective PID. A PID may alert the 
device to the presence of applications in the data 
stream, the PID being identified by the PMT table. 
[0041 ] Referring to Figures 2 and 3, the structure of a 
smartcard 12 adapted to charge an executable applica- 
tion in the decoder will now be described. Figure 2 
shows a plan view of the smartcard, comprising an area 
of contacts 13, a FLASH ROM memory 14, an EEP- 
ROM memory 15, a microprocessor 16, a DIL switch 
unit 17 and a number of other discrete components 
[0042] The memory card 2 possesses the width and 
thickness of a standard normalised smart card so as to 
enable its insertion in a smartcard slot of the decoder. 
However, as will be seen from Figure 2. the card is 
longer than a standard card to enable the incorporation 
of all the components described on its surface. In the 
context of its use in the initial configuration of the 
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decoder this increase in size may not be significant In 
alternative situations, for example, where the card is 
intended to be supplied to the eventual user of the 
decoder, some components such as the DIL switch unit 
17 and EEPROM 15 may be omitted. The remaining 
components may be miniaturised and the whole card 
designed to conform with smart card norms. 
[0043] Referring now to Figure 3. the contacts 13 
engaged in the smart card reader in the decoder may 
be divided by function into a power supply line 18 which 
supplies the card voltage Vcc, a reset line 19 connected 
to the corresponding reset terminal 20 of the microproc- 
essor, a clock line 21 connected to clock terminal 22 of 
the microprocessor, and an I/O line 23 connected to cor- 
responding input and output terminals 24. 25 of the 
microprocessor. As shown, connections are made via a 
series of op-amps 26. The power supply is regulated by 
means of a capacitor C4. 

[0044] The EEPROM memory unit 1 5 is connected via 
lines 27, 28 to the microprocessor 16. these lines being 
biased by the power supply Vcc connected via the 
resistances R1 and R2. The function of the EEPROM 
memory will be cfiscussed in more detail below in rela- 
tion to the configuration application. The microproces- 
sor 16 is connected by a series of lines 29 to 
corresponding terminals of the FLASH memory 14. The 
state of three of these lines 30. 31 . 32 is determined by 
the switch unit 17 connected via a series of diodes D1 , 
D2, D3 and biased by the power supply Vcc connected 
by resistances R3, R4, R5. By switching each of the 
switches ON or OFF, a binary control word 000, 001. 
010. 01 1 etc can be defined. As win be discussed, this 
binary word is used to determine the first block in the 
FLASH memory that will be accessed upon insertion of 
the card and, hence, the application that will be charged 
into the decoder. 

[0045] The card 1 2 is designed to engage in the credit 
card reader 7 of the decoder 1, the reader 6 being 
reserved for the subscription card associated with the 
broadcast system which contains the keys necessary 
for, inter alia, decoding scrambled transmissions and 
verifying downloaded code. Upon insertion, the reader 
checks the type of card inserted, by means of a simple 
handshake signal to the card. In the event that the 
reader identifies the card as being a card of the type 
containing application code tor loading into the 
machine, the decoder will access the f irst block of code 
in the FLASH memory 15 at the hexadecimal address 
corresponding to the binary message indicated by the 
switch unit 17. 

[0046] In the case, for example, where the card is 
intended to be used in the testing of decoders tor a 
number of service providers, a different application may 
be loaded corresponding to the service provider in 
question or corresponding to the functions that need to 
be tested. In addition or alternatively, a first setting of 
the switches may be used to download the application 
supplied with the card and a second to download a dif- 



ferent application and/or associated parameters set by 
the service provider (see below). 
[0047] The application code is downloaded from the 
from the card in a series of modules, the modules then 
5 being assembled to form a series of MPEG-2 (short 
form) tables, as described above in connection with 
broadcast data. The advantage of formatting data 
according to the MPEG format is that the virtual 
machine within the central control unit of the decoder 
10 can directly process applications received in this format, 
in the same manner as it processes applications 
received via the broadcast link. As will be appreciated, 
this leads to considerable reductions in the time needed 
to process the application etc. 
is [0048] Prior to storage in the card, the application 
code contained within the MPEG tables is encrypted to 
provide a digital signature. This signature is generated 
by the supplier of the card using a private key known 
only to himself. The decoder has access to a series of 
20 public keys on a subscription card inserted in the other 
card reader. In the event that the decoder confirms that 
the code has originated from a known source, by verify- 
ing the digital signature, the application will be installed 
in the machine. Unverffied code will be rejected by the 
25 decoder. 

[0049] Other encryption techniques used in broadcast 
digital systems may also be applied, for example, to 
encrypt the code according to one or more private keys 
known to the supplier of the application card to prevent 
30 a third party from decrypting and using the application 
stored on the card. The decoder possesses the key or 
keys necessary to decrypt the code as stored on a sub- 
scription card. This encryption can be carried out in 
addition to and after the signature of the code. 
35 [0050] The use of a subscription card to hold the nec- 
essary decryption keys generally requires that the 
decoder is also provided with a second smartcard 
reader, since both cards will be addressed by the 
decoder during the downloading and verification steps. 
40 Alternative embodiments are conceivable, for example, 
in which data is first downloaded from the application 
card into a buffer, the application card removed and the 
card containing the decryption keys inserted etc. How- 
ever, as will be appreciated, these are less convenient 
45 than the use of a decoder equipped with two or more 
smartcard readers, particularly since one or the other of 
the cards may need to be re-addressed at any moment. 
[0051 ] The installation of a test application within the 
decoder will now be described. Typically, such a test 
so application is used by a service provider to test the cor- 
rect operation of the hardware layer independently of 
the software that normally sits on top of the hardware 
layer. For example, the test application may control the 
tuner of the decoder to test that the decoder can cor- 
55 rectiy receive data transmitted on a given channel fre- 
quency. 

[0052] The loaded application may be interactive so 
as to permit the operator to enter specific parameters 
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into the decoder by means of, for example, the remote 
control handset. In the case of the tuning frequency the 
operator may manually adjust the set frequency until the 
clearest reception is obtained. Once this frequency is 
known for one decoder, it will be the same for the rest of s 
the series. It is therefore desirable that this and other 
parameter values can be memorised in order to avoid 
repeating the operation for each decoder. 
[0053] Accordingly, once defined by the operator in 
relation to a first decoder, these parameters are down* 10 
loaded into the EEPROM memory 15 of the card. Upon 
removal of the card, the operator changes the setting of 
the switches in the switch unit 17 such that an applica- 
tion at a different address within the FLASH memory will 
be accessed upon its next insertion in a decoder. When is 
the card is then reinserted in the next in the series of 
decoders, this application will signal the presence of 
predetermined parameter values stored in the EEP- 
ROM and these values will be automatically loaded into 
and set in the decoder. In the case of the tuner, for 20 
example, the application will automatically set the tuner 
to the frequency selected by the operator for the first 
decoder and the operator can then immediately deter- 
mine whether the tuner operates correctly or not. 
[0054] In view of the relative difficulty in writing data to 25 
a FLASH unit (as compared to an EEPROM) it is prefer- 
able, though not essential, that the FLASH memory be 
used for applications that will not be modified in use and 
the EEP ROM memory be reserved for data downloaded 
into the card. 30 
[0055] Furthermore, in order to increase the security 
of the system, the FLASH memory may be locked into a 
read-only configoration by the microprocessor upon ini- 
tial connection of the card, and/or upon receipt of an 
unknown instruction. Other memory combinations and as 
configurations are of course posstole, using ROM 
devices etc. 

[0056] Whilst the above embodiment has been dis- 
cussed in relation to a smartcard realisation, other port- 
able memory cards, such as PCMCIA cards, may be 40 
used if the decoder is capable of reading such cards. 

Claims 

1. A method for downloading an executable applica- 45 
tion into a decoder, characterised in that the appli- 
cation is stored on a portable memory card 
introduced into a card reader in the decoder, the 
decoder reading and downloading the application 
from the card. so 

2. A method as claimed in claim 1 in which the card is 
adapted to be read in a smartcard reader in the 
decoder. 

55 

3. A method as claimed in claim 1 or 2 in which the 
executable application stored within the card and 
downloaded into the decoder is formatted accord- 



ing to a broadcast data format. 

4. A method as claimed in claim 3 in which the execut- 
able application stored within the card and down- 
loaded into the decoder is formatted according to 
an MPEG data format 

5. A method as claimed in claim 4, the application 
being subdivided into a plurality of modules in the 
memory of the card, the modules being down- 
loaded and put together sequentially by the 
decoder to assemble the complete MPEG applica- 
tion. 

6. A method as claimed in any preceding claim, in 
which some or part of the application stored within 
the memory card is encrypted with one or more 
encryption keys. 

7. A method as claimed in any preceding claim in 
which some or part of the data stored in the mem- 
ory card has been signed with a private key, the 
decoder having access to the equivalent public key 
so as to authenticate the origin of the application. 

8. A method as claimed in any preceding claim in 
which the decoder is provided with a plurality of 
smart card readers, to permit reading of a smart- 
card carrying the executable . application and 
another smartcard. 

9. A method as claimed in any preceding claim includ- 
ing the steps of downloading the application into the 
decoder, setting one or more parameters associ- 
ated with the application and storing the parame- 
ters in the memory card for later use. 

10. A method as claimed in any preceding claim in 
which the card includes a physical switch means for 
selecting one of a plurality of applications stored on 
the card that will be downloaded upon insertion of 
the memory card in the decoder. 

11- A decoder for use in a method as claimed in any 
preceding claim. 

12. A decoder as claimed in claim 1 1 adapted to read 
broadcast format data introduced via a card reader 
in the decoder. 

13. A memory card for use in a method as claimed in 
any of claims 1 to 10. 

14. A memory card as claimed in claim 13 including an 
application stored in a broadcast data format in the 
card. 
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